c00fe09b5da22b53b14667db8e086d00 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c00fe09b5da22b53b14667db8e086d00
Size

105KB
MD5

c00fe09b5da22b53b14667db8e086d00
SHA1

c73532109616e095b7068d1eb8395158c6cd775a
SHA256

77fca7e1224cb89e550975cc2b84b149bb5d1d035dc5768e08b0af0270ea682f
SHA512

20c80ad92bb4b8fe224e42d03aa56a4ad85a8bda2a06cfe5d44a1080f3d41e23de7d7a66e6cd455e3e2eb2c143f755b48fe2749fa01d73c9154041ffd19b3c39
SSDEEP

1536:nctefZ4bSqagMmU7UODqX7x4G8BUqHNr8HJlrf6ygszzn8FCDghZRCB67:nKefWbC8zX6G8BxpQJpf6yzKCM1Ck7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c00fe09b5da22b53b14667db8e086d00

Files

c00fe09b5da22b53b14667db8e086d00
.exe windows:4 windows x86 arch:x86

536e051eb38b51f0d913ca189fd9c74f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetTempPathA
CloseHandle
GetStartupInfoA
VirtualProtect
FatalExit

user32

IsDlgButtonChecked
GetUpdateRgn

Exports

Exports

SetGkfpqkkc

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.datatxt
Size: 8KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ldata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdsec
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ